security-auth

What this skill does

# Security & Authentication Specialist - Complete Security Engineering Workflow

## Overview

This skill provides end-to-end security and authentication services by orchestrating security architects, identity specialists, and compliance experts. It transforms security requirements into production-ready authentication and authorization systems with comprehensive threat protection, compliance adherence, and security monitoring.

**Key Capabilities:**
- 🔐 **Multi-Layer Security Architecture** - Authentication, authorization, and threat protection systems
- 🛡️ **Identity & Access Management** - User authentication, role-based access, and privilege management
- 📊 **Compliance & Auditing** - Regulatory compliance, security auditing, and reporting
- 🔧 **Security Integration** - Seamless integration with existing systems and third-party security services
- 📋 **Threat Protection** - Proactive threat detection, prevention, and incident response

## When to Use This Skill

**Perfect for:**
- Authentication system design and implementation
- Authorization framework development and RBAC implementation
- Security compliance and auditing requirements
- Threat protection and security monitoring setup
- Identity management system integration
- Security assessment and vulnerability management

**Triggers:**
- "Implement authentication and authorization for [application]"
- "Design security architecture for [system]"
- "Set up identity and access management"
- "Implement compliance and security auditing"
- "Create threat protection and monitoring system"

## Security Expert Panel

### **Security Architect** (System Security Design)
- **Focus**: Security architecture, threat modeling, security patterns
- **Techniques**: Zero-trust architecture, defense-in-depth, security frameworks
- **Considerations**: Security by design, attack surface reduction, security controls

### **Identity Specialist** (Authentication & Authorization)
- **Focus**: Authentication systems, identity management, access control
- **Techniques**: OAuth 2.0, OpenID Connect, JWT, SAML, RBAC/ABAC
- **Considerations**: User experience, security requirements, scalability

### **Compliance Expert** (Regulatory & Auditing)
- **Focus**: Regulatory compliance, security auditing, risk assessment
- **Techniques**: SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS compliance
- **Considerations**: Legal requirements, audit trails, documentation

### **Threat Analyst** (Security Monitoring & Response)
- **Focus**: Threat detection, incident response, security monitoring
- **Techniques**: SIEM systems, threat intelligence, security analytics
- **Considerations**: Real-time detection, response procedures, forensic analysis

### **Cryptographic Specialist** (Encryption & Data Protection)
- **Focus**: Encryption implementation, key management, data protection
- **Techniques**: AES, RSA, TLS/SSL, hash functions, digital signatures
- **Considerations**: Key lifecycle management, performance impact, compliance

## Security Implementation Workflow

### Phase 1: Security Requirements Analysis & Threat Modeling
**Use when**: Starting security implementation or security assessment

**Tools Used:**
```bash
/sc:analyze security-requirements
Security Architect: threat modeling and risk assessment
Compliance Expert: regulatory requirement analysis
Threat Analyst: attack surface analysis
```

**Activities:**
- Analyze security requirements and threat landscape
- Identify compliance requirements and regulatory constraints
- Perform threat modeling and attack surface analysis
- Define security policies and procedures
- Plan security architecture and control implementation

### Phase 2: Authentication System Design & Implementation
**Use when**: Designing and implementing authentication systems

**Tools Used:**
```bash
/sc:design --type authentication auth-system
Identity Specialist: authentication framework design
Cryptographic Specialist: secure credential management
Security Architect: authentication security controls
```

**Activities:**
- Design authentication architecture and user identity flows
- Implement secure credential storage and management
- Create multi-factor authentication (MFA) systems
- Design session management and token-based authentication
- Implement password policies and secure recovery mechanisms

### Phase 3: Authorization Framework & Access Control
**Use when**: Implementing authorization and access control systems

**Tools Used:**
```bash
/sc:design --type authorization rbac-system
Identity Specialist: role-based access control implementation
Security Architect: privilege management design
Compliance Expert: access control auditing
```

**Activities:**
- Design role-based access control (RBAC) or attribute-based access control (ABAC)
- Implement fine-grained permissions and privilege management
- Create access control policies and enforcement mechanisms
- Design admin interfaces for user and permission management
- Implement access request and approval workflows

### Phase 4: Security Integration & API Protection
**Use when**: Integrating security controls and protecting APIs

**Tools Used:**
```bash
/sc:implement security-integration
Security Architect: API security and integration
Cryptographic Specialist: encryption and data protection
Threat Analyst: input validation and sanitization
```

**Activities:**
- Implement API authentication and authorization middleware
- Create input validation and output encoding mechanisms
- Implement rate limiting and DDoS protection
- Set up CORS policies and secure headers
- Integrate with third-party security services and tools

### Phase 5: Compliance & Auditing Implementation
**Use when**: Ensuring regulatory compliance and security auditing

**Tools Used:**
```bash
/sc:implement compliance-auditing
Compliance Expert: compliance framework implementation
Security Architect: security monitoring and logging
Threat Analyst: audit trail and forensics
```

**Activities:**
- Implement comprehensive audit logging and monitoring
- Create compliance reporting and documentation
- Set up security incident tracking and reporting
- Implement data retention and deletion policies
- Create security dashboards and compliance metrics

### Phase 6: Threat Protection & Security Monitoring
**Use when**: Setting up proactive threat detection and response

**Tools Used:**
```bash
/sc:implement threat-protection
Threat Analyst: security monitoring and detection
Security Architect: incident response procedures
Compliance Expert: security metrics and reporting
```

**Activities:**
- Implement security information and event management (SIEM)
- Set up real-time threat detection and alerting
- Create incident response procedures and playbooks
- Implement security analytics and anomaly detection
- Design security metrics and KPI tracking

## Integration Patterns

### **SuperClaude Command Integration**

| Command | Use Case | Output |
|---------|---------|--------|
| `/sc:design --type authentication` | Authentication system | Complete auth architecture |
| `/sc:design --type authorization` | Authorization framework | RBAC/ABAC implementation |
| `/sc:implement security` | Security controls | Production-ready security |
| `/sc:analyze threats` | Threat analysis | Threat model and mitigation |
| `/sc:implement compliance` | Compliance | Regulatory compliance system |

### **Security Framework Integration**

| Framework | Role | Capabilities |
|-----------|------|------------|
| **OWASP Top 10** | Security standards | Comprehensive vulnerability protection |
| **NIST Cybersecurity** | Security framework | Complete security program implementation |
| **ISO 27001** | Compliance management | Information security management system |
| **Zero Trust** | Security model | Zero-trust architecture implementation |

### **MCP Server Integration**

| Server | Expertise | Use Case |
|--------|----------|---------|
| **Sequential** | Security reasoning | Complex security analysis and design |
| **Better Auth** | Au